Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
File:                     pHwKyKnV9ixJHUsXyyErUsDnVgc.mft (raw, json)
Hash identifier:          HaXiiWb0YBYpMRIyOF5sV0i3CnykcVyoOYE35h2VRqw=
Subject key identifier:   E5:A8:AB:B4:87:BB:0A:25:CD:C7:49:ED:FC:82:53:B4:D8:8B:5D:DB
Authority key identifier: A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07
Certificate issuer:       /CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
Certificate serial:       0190448A6236A970672BAD90BC1EB3E09F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
Manifest number:          0E1C
Signing time:             Sun 23 Jun 2024 10:00:38 +0000
Manifest this update:     Sun 23 Jun 2024 10:00:38 +0000
Manifest next update:     Mon 24 Jun 2024 10:00:38 +0000
Files and hashes:         1: 0YIzaoHdJU_5DQNEIa-ynUDovS4.roa (hash: ZfemyVTjwBNWqaFFLgZKloCVgOtPC6PC4HZBJbEcAcM=)
                          2: pHwKyKnV9ixJHUsXyyErUsDnVgc.crl (hash: Fc1TNFlPbgw2CrlVY936Qy4nCMqXRPeu5SqkuMh56Rk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 10:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:44:8a:62:36:a9:70:67:2b:ad:90:bc:1e:b3:e0:9f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47c0ac8a9d5f62c491d4b17cb212b52c0e75607
        Validity
            Not Before: Jun 23 10:00:38 2024 GMT
            Not After : Jun 24 10:00:38 2024 GMT
        Subject: CN=e5a8abb487bb0a25cdc749edfc8253b4d88b5ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:44:f2:30:76:80:01:2b:16:fe:55:16:0e:
                    0e:a3:3d:aa:44:15:fe:6c:34:53:f8:99:50:5c:12:
                    69:c8:0a:8f:fe:13:2c:ce:65:97:1d:e3:78:e2:0a:
                    c4:36:3a:b3:17:cf:63:0d:aa:2f:9e:4e:d4:e8:8e:
                    c6:b9:25:cb:cd:21:6d:0a:32:fd:cc:7b:20:aa:74:
                    e1:7b:47:92:2c:bf:17:e6:2f:3d:5d:93:cd:ec:4d:
                    d6:aa:3e:cf:36:39:3b:2a:6d:5d:25:75:10:f4:09:
                    d3:9a:0e:ce:8f:58:c1:63:9b:f2:33:c3:43:2b:39:
                    8f:b7:2c:4d:1f:1b:47:f1:78:fd:b4:ab:2c:82:37:
                    87:28:5c:55:8a:c3:0d:31:48:87:b9:e5:17:1f:60:
                    ec:25:40:bc:4c:8b:2b:d2:6b:25:ff:80:43:2f:66:
                    15:e3:ee:ed:67:b7:ff:8a:eb:c9:ad:d5:c3:d0:be:
                    9f:90:43:a4:e5:0f:8d:5a:7e:4b:3d:68:8a:0e:14:
                    d5:50:71:f9:32:f1:d1:2d:89:7a:14:36:3f:80:91:
                    57:3d:44:03:29:1c:7d:ff:49:a8:89:01:67:28:0d:
                    8a:a8:eb:97:35:b2:8b:a0:12:fe:5d:b5:ff:f6:ce:
                    cd:c6:14:2d:1c:e1:84:b2:68:3e:b6:ac:8b:be:0c:
                    78:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A8:AB:B4:87:BB:0A:25:CD:C7:49:ED:FC:82:53:B4:D8:8B:5D:DB
            X509v3 Authority Key Identifier:
                keyid:A4:7C:0A:C8:A9:D5:F6:2C:49:1D:4B:17:CB:21:2B:52:C0:E7:56:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHwKyKnV9ixJHUsXyyErUsDnVgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/25c91d-5a05-46a2-9a79-420cc251e5eb/1/pHwKyKnV9ixJHUsXyyErUsDnVgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9c:98:f0:2b:f5:be:44:39:4c:23:e7:c5:b8:9c:be:a0:70:
         a9:bb:a4:44:43:18:65:2b:20:ff:15:9e:ce:a7:44:d3:eb:8e:
         f1:ee:ab:fb:bb:ff:09:be:87:da:fb:8d:74:06:ea:0f:00:3e:
         60:63:ec:ee:c5:43:bc:3f:62:8a:e8:36:28:6d:8c:56:47:c0:
         73:e7:1e:0e:91:8d:34:2d:75:94:32:cb:55:d5:91:57:42:c2:
         70:10:ed:95:84:59:a7:e7:6f:57:51:f8:9b:b9:71:b0:7d:ce:
         f5:24:66:9c:67:ec:27:ca:5e:db:d0:d9:ec:51:63:e4:af:42:
         46:6b:78:a3:e2:6b:d5:64:dd:18:3a:bd:1a:ea:6f:cc:62:15:
         ef:9e:aa:59:5f:86:5d:27:b9:41:a0:73:2e:a4:11:57:a3:0d:
         fc:c6:49:d5:28:0a:a6:10:5e:74:f9:28:ef:49:9a:6c:1b:07:
         c4:9e:79:8d:bd:6f:8a:d7:cc:82:08:dc:af:be:b7:ef:86:83:
         89:b4:d7:96:81:3b:af:fa:23:7a:1d:f9:06:4a:e0:94:c0:34:
         60:77:b2:34:f3:e3:02:21:c4:84:8a:d3:92:26:4a:85:8a:2f:
         1e:32:86:c2:cf:fd:9b:7b:f3:56:44:88:79:88:a0:37:4b:60:
         b5:1f:bd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:18:58 2024 by rpki-client on console-fra.rpki-client.org